General
-
Target
JaffaCakes118_352890a11da33b3aa604c2e1739eecf5
-
Size
68KB
-
Sample
250126-nr4gca1qbq
-
MD5
352890a11da33b3aa604c2e1739eecf5
-
SHA1
cf2e5de5540f9c4194d5e560684a086883424f50
-
SHA256
56e5c33cd341d19a0b23e1b4cbe968a8ed2bc85a4997a21d32cc1be438136505
-
SHA512
eb485502a7ea69337d22876b0ea930ca41aef505b90665564f33cf452b637f7cdf548b16ce5ed0405e05ce637ecb0c39c19dcc8bba3f62d8af739ac3e937f5bb
-
SSDEEP
768:48m1Sq4NQErBsH1tzoisBKQI6dObAG/dq8uW29Ifnca/yyR+P2ujfGiZKPA+7XoS:asq+QV4rObAdXWpf/y+7ozNwiFo3JL
Behavioral task
behavioral1
Sample
JaffaCakes118_352890a11da33b3aa604c2e1739eecf5.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_352890a11da33b3aa604c2e1739eecf5.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
xtremerat
a1a1a1b2b2b2.selfip.com
Targets
-
-
Target
JaffaCakes118_352890a11da33b3aa604c2e1739eecf5
-
Size
68KB
-
MD5
352890a11da33b3aa604c2e1739eecf5
-
SHA1
cf2e5de5540f9c4194d5e560684a086883424f50
-
SHA256
56e5c33cd341d19a0b23e1b4cbe968a8ed2bc85a4997a21d32cc1be438136505
-
SHA512
eb485502a7ea69337d22876b0ea930ca41aef505b90665564f33cf452b637f7cdf548b16ce5ed0405e05ce637ecb0c39c19dcc8bba3f62d8af739ac3e937f5bb
-
SSDEEP
768:48m1Sq4NQErBsH1tzoisBKQI6dObAG/dq8uW29Ifnca/yyR+P2ujfGiZKPA+7XoS:asq+QV4rObAdXWpf/y+7ozNwiFo3JL
Score10/10-
Detect XtremeRAT payload
-
XtremeRAT
The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.
-
Xtremerat family
-